An Agent Identity Is Not Its Principal
Knowing which runtime sent a request does not reveal who authorized it, who benefits, or who is accountable.
AgentCollusionAI security startupNews
News and technical writing.
Company updates, technical analysis, and focused field notes on the trust layer for multi-agent systems.
Delegation Chains Need Expiry at Every Hop
A short-lived user instruction can become durable authority when agents delegate work recursively.
Least Privilege Must Follow the Current Step
Agents that plan dynamically should not receive every permission their workflow might eventually need.
Workload Identity Can Anchor Agent Runtimes
Cryptographic workload identity helps answer which process is acting, but not whether its plan is legitimate.
Multi-Tenant Agents Invite Confused Deputies
An agent with access to several tenants can misuse valid authority when resource and principal context are mixed.
Authority Provenance Must Survive Tool Calls
The final API sees a credential, but often loses the human request and delegation history that justified it.
Revocation Must Reach Long-Running Tasks
Cancelling a credential is not enough when agents have cached plans, artifacts, and delegated work already in motion.
Non-Repudiation Needs More Than a Signature
A signed action can prove origin and integrity without proving informed authority or a fair decision process.
Human-Present and Human-Absent Authority Differ
A user approving a final action creates different evidence from a standing intent executed later by agents.
